Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/wfDJEub6ATT-kq9-fQrR_OWsoGM.roa
File: wfDJEub6ATT-kq9-fQrR_OWsoGM.roa (raw, json)
Hash identifier: OHIWj/AuCgHctKrJF1h9+TtoXvGmwD9hHfn4bVrhPt4=
Subject key identifier: C1:F0:C9:12:E6:FA:01:34:FE:92:AF:7E:7D:0A:D1:FC:E5:AC:A0:63
Certificate issuer: /CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Certificate serial: 17ED7F25
Authority key identifier: 84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/wfDJEub6ATT-kq9-fQrR_OWsoGM.roa
Signing time: Sat 01 Jan 2022 03:59:56 +0000
ROA not before: Sat 01 Jan 2022 03:59:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35183
IP address blocks: 62.176.111.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 401440549 (0x17ed7f25)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Validity
Not Before: Jan 1 03:59:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c1f0c912e6fa0134fe92af7e7d0ad1fce5aca063
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:1d:c1:9a:c4:c4:5c:a8:36:dc:d7:fc:d6:e0:
d5:50:97:35:0b:8f:84:a9:5f:e0:36:83:bc:4f:8c:
c5:3e:3d:15:91:b0:e9:7c:47:9d:66:45:19:2b:35:
a5:a2:30:08:be:5c:56:8f:4d:c6:22:98:a7:05:23:
b4:08:4d:ce:14:69:a7:da:04:07:39:39:a6:6f:6b:
c9:c1:0a:89:e5:46:d2:f4:c1:f5:8a:5c:43:e3:15:
da:8d:7b:6c:79:aa:67:e2:5a:8e:c0:53:af:66:22:
4a:f1:45:6b:95:8f:ca:c5:9b:b9:c9:c7:17:14:a8:
67:ce:6e:e1:a8:b9:24:9b:be:f8:a5:83:a9:b3:67:
6c:5c:6a:41:49:32:d3:07:79:32:db:32:88:30:43:
92:86:b4:72:d9:f8:4c:db:12:62:ac:b0:29:aa:d6:
f7:06:14:1b:cf:37:ec:6e:e7:00:f9:ea:4e:38:56:
27:eb:c2:c4:4a:92:7b:e3:ea:86:ed:40:7d:b9:f7:
66:32:82:2f:ad:7b:ab:a8:00:24:be:6b:4c:4c:2f:
19:2a:a7:e7:b6:ac:7f:67:2c:3c:9e:72:cc:19:9d:
06:a7:55:59:7c:56:5d:65:b4:c7:2b:83:51:66:77:
07:b4:fc:0b:51:f6:e2:ee:27:65:c8:f7:53:6e:67:
bd:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:F0:C9:12:E6:FA:01:34:FE:92:AF:7E:7D:0A:D1:FC:E5:AC:A0:63
X509v3 Authority Key Identifier:
keyid:84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/wfDJEub6ATT-kq9-fQrR_OWsoGM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.176.111.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:34:d0:89:35:3c:c1:40:38:63:f8:82:3c:03:47:81:db:0e:
e5:dd:d0:35:83:e8:0a:27:39:e7:fb:b2:ea:4a:51:69:5f:08:
d1:fd:82:5a:0b:5c:70:5c:85:5e:ea:ff:f9:3c:7e:bc:f1:d3:
a7:63:ef:df:31:7d:3d:ec:8d:ac:d9:94:bf:a4:88:f1:6e:ab:
d7:f0:ba:7b:8f:3d:c9:d0:18:db:8e:26:40:cb:4b:84:cb:c8:
f3:13:f4:bb:03:f2:7b:dd:be:40:56:9d:dd:63:76:21:56:4a:
5d:9c:55:77:60:88:26:6e:21:33:ce:79:7a:3c:2c:38:a9:f2:
12:b5:7a:d4:a0:c1:76:69:3a:23:d9:9e:3f:28:0b:84:5f:d9:
88:85:7a:95:16:c4:15:cc:90:7f:75:f5:7d:7e:40:14:e7:94:
07:0a:53:8e:10:77:fb:45:51:fc:8a:07:c9:31:f5:a2:0e:5a:
42:cf:ab:de:ae:41:35:d7:d2:62:13:d8:4d:95:8e:4c:ca:93:
44:b3:99:a2:f5:c0:2c:23:b7:0e:ad:cf:a9:35:ff:8c:49:45:
74:33:73:18:97:9f:13:5b:e4:27:9d:38:78:90:6d:91:2c:bd:
64:62:67:77:47:fa:ee:2f:f0:3d:62:71:38:a7:b0:0b:ce:d3:
b0:a0:ca:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:05 2024 by rpki-client on console-fra.rpki-client.org